SQLMap is a simple command-line tool used for detecting and testing SQL injection vulnerabilities in web applications. It can identify database vulnerabilities, retrieve database information, and perform different database enumeration tasks. SQLMap is widely used by security researchers and ethical hackers for authorized security testing.
Features of SQLMap:
- Detect SQL injection vulnerabilities.
- Support multiple database management systems.
- Enumerate databases, tables, and columns.
- Retrieve database information.
- Support different SQL injection techniques.
- Provide tamper scripts for payload testing.
SQLMap Installation Commands
You can install SQLMap in Termux using the commands below, just copy and run them one by one.
Update Termux packages.
pkg update && pkg upgrade -y
Install Git and Python.
pkg install git python -y
Clone the SQLMap repository.
git clone https://github.com/sqlmapproject/sqlmap
Go to the SQLMap directory.
cd sqlmap
Show the help menu.
python sqlmap.py -h
SQLMap is now installed and ready to use.
SQLMap Usage Commands
After installing SQLMap, you can use the following commands to access different features and perform authorized security testing.
Show the basic help menu.
python sqlmap.py -h
Show the advanced help menu.
python sqlmap.py -hh
Display the installed version.
python sqlmap.py --version
Scan a target URL.
python sqlmap.py -u "http://example.com/page.php?id=1"
Scan multiple targets from a file.
python sqlmap.py -m targets.txt
Load an HTTP request from a file.
python sqlmap.py -r request.txt
Use a random User-Agent.
python sqlmap.py --random-agent -u "http://example.com/page.php?id=1"
List available tamper scripts.
python sqlmap.py --list-tampers
Enumerate databases.
python sqlmap.py -u "http://example.com/page.php?id=1" --dbs
Enumerate tables from a database.
python sqlmap.py -u "http://example.com/page.php?id=1" -D database_name --tables
Enumerate columns from a table.
python sqlmap.py -u "http://example.com/page.php?id=1" -D database_name -T table_name --columns
Retrieve the current database.
python sqlmap.py -u "http://example.com/page.php?id=1" --current-db
Retrieve the current database user.
python sqlmap.py -u "http://example.com/page.php?id=1" --current-user
Run SQLMap in batch mode.
python sqlmap.py --batch -u "http://example.com/page.php?id=1"
Update SQLMap.
python sqlmap.py --update
Launch the beginner wizard.
python sqlmap.py --wizard
You can use these commands to learn SQLMap features, perform authorized database security testing, and explore its available options.
Overview
SQLMap is a useful command-line tool for testing SQL injection vulnerabilities and exploring database information. It is simple to install, easy to use, and offers many features for security testing. You can explore its different features, learn SQL injection testing, and perform authorized database security assessments using simple commands.
